Policy OPA

Policy OPA is a DevOps skill for Claude Code, published by AgentSecOps in SecOpsAgentKit.

204 stars39 forkson AgentSecOps/SecOpsAgentKitAdded 2026/09/05+1% in starsRepository updated 2026/04/15

agentsai-agentsanthropicappsecclaude-codedastdevsecopsllm-toolssastsecuritysecurity-automationsecurity-toolsshift-leftvulnerability-scanning

Install in seconds

Install Policy OPA

Copy Policy OPA into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/compliance/policy-opa ~/.claude/skills/policy-opa

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/AgentSecOps/SecOpsAgentKit.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/compliance/policy-opa/SKILL.md in AgentSecOps/SecOpsAgentKit
Installs to: ~/.claude/skills/policy-opa
Collection: One of 25 skills cataloged from this repository
Category: DevOps — 973 skills

What Policy OPA does

Policy OPA enforces security and compliance rules with Open Policy Agent and Rego. Use it to validate Kubernetes admission policies, audit configuration drift, and add policy checks to CI/CD pipelines.

Policy OPA is cataloged under DevOps on DirSkills. Policy OPA comes from a repository tagged agents, ai-agents, anthropic, appsec and claude-code.

Documentation

README

Excerpt

Policy-as-Code with Open Policy Agent

Overview

This skill enables policy-as-code enforcement using Open Policy Agent (OPA) for compliance validation, security policy enforcement, and configuration auditing. OPA provides a unified framework for policy evaluation across cloud-native environments, Kubernetes, CI/CD pipelines, and infrastructure-as-code.

Use OPA to codify security requirements, compliance controls, and organizational standards as executable policies written in Rego. Automatically validate configurations, prevent misconfigurations, and maintain continuous compliance.

Quick Start

Install OPA

# macOS
brew install opa

# Linux
curl -L -o opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64
chmod +x opa

# Verify installation
opa version

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Policy OPA

What else does AgentSecOps publish alongside Policy OPA?
Policy OPA is one of 25 skills that DirSkills catalogs from AgentSecOps/SecOpsAgentKit, the repository it ships in. Its siblings there include Api Spectral, Bandit Python SAST and Black Duck SCA. Each one is a separate skill with its own page in this directory, installs the same way Policy OPA does, and is maintained by AgentSecOps in that same repository. The rest of the collection is listed on the AgentSecOps/SecOpsAgentKit page.
How does Policy OPA compare to other DevOps skills?
Policy OPA ranks #857 by stars among the 973 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Policy OPA against them. Open each page to compare what they document and how they install.